$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/5b047369-1853-3c0b-830c-d67137c9c298.roa File: 5b047369-1853-3c0b-830c-d67137c9c298.roa (raw, json) Hash identifier: vcrSVkPnmiVnzKDTuOQ5WNcQQtNZGymtBVqc6sqJFNo= Subject key identifier: F0:D9:34:E9:91:B2:5A:5C:A0:FD:53:79:6B:B3:7C:12:16:DD:58:B3 Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Certificate serial: 010D0C9F432858496054188A8333107B968B2E60 Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/5b047369-1853-3c0b-830c-d67137c9c298.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 59 IP address blocks: 198.51.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:18:8a:83:33:10:7b:96:8b:2e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=fddfc248-72a0-40e6-8653-4cf72cc5f4b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:62:9e:3c:c4:d3:0f:78:0c:d2:8d:f4:2a:6d: bd:c1:cf:d9:85:be:e2:a4:10:00:54:e7:cf:d9:09: 59:1b:f5:f8:08:71:8a:8f:e0:de:90:8f:70:ab:b7: 82:2c:c2:ab:4e:89:69:80:95:13:61:58:17:e6:e1: 09:dc:7d:42:2a:09:08:72:e4:ae:c7:6f:c7:f2:77: 2b:cb:b1:98:88:f6:38:ea:83:98:ed:cd:0b:f6:0b: 56:9c:4d:0c:e2:9e:f1:6c:00:e0:03:b1:26:36:0b: 3a:3a:5d:09:61:8e:c0:2b:33:6f:b9:f2:94:c4:1f: a4:c4:1b:0f:bb:34:f2:c6:bd:49:1d:30:b1:1e:b4: 0f:21:69:d6:6c:16:c1:48:da:6d:04:00:93:01:ad: 7a:92:b5:92:ba:dd:26:33:b5:60:c2:b1:ba:a4:b2: f4:0b:dd:2f:6d:c6:bd:2a:9f:19:eb:52:76:c4:46: d1:4e:fd:66:36:10:ec:31:50:32:cb:3f:b1:de:ac: 99:66:65:54:04:d4:2f:c9:9a:31:59:28:b0:3f:41: 04:4c:42:2e:24:8f:05:67:cd:46:85:61:04:c7:2c: 3b:31:3d:48:3f:7d:8c:f2:8f:40:1b:7f:30:47:bb: 41:15:8e:d1:8a:36:33:60:f7:86:14:b4:dc:55:20: f1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D9:34:E9:91:B2:5A:5C:A0:FD:53:79:6B:B3:7C:12:16:DD:58:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/5b047369-1853-3c0b-830c-d67137c9c298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl X509v3 Authority Key Identifier: keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer sbgp-ipAddrBlock: critical IPv4: 198.51.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:07:d8:c3:17:3c:91:ff:82:bc:48:68:cd:b9:e5:f3:69:1d: 12:f4:85:68:d0:6e:3a:34:fd:b4:8c:97:02:fa:ce:7c:e9:8d: 57:45:d8:90:7a:8c:5e:fc:5a:d8:ca:91:22:0e:ce:02:66:a4: 08:a8:63:8a:3e:7a:37:36:52:0f:47:f1:c8:55:de:2b:5f:92: 80:b9:01:29:8f:19:36:88:b1:f8:a8:4b:fd:7b:bd:68:d2:44: ac:d4:04:d6:fd:cd:81:e0:8a:fd:7b:f0:8b:ef:77:dc:c0:86: 82:75:5b:2c:c3:45:db:01:74:2a:65:cb:14:ac:52:93:65:96: 8c:cb:15:8d:ac:16:db:45:83:a0:10:b8:20:81:0a:24:4e:16: 6a:6e:e1:61:89:1a:32:7e:1d:07:51:7e:58:05:cb:89:4e:8e: ec:8d:e5:ca:23:55:ac:a5:77:37:7f:a6:cd:46:f0:7d:33:d8: a2:7b:3a:aa:a3:8e:9a:d0:32:4d:e7:35:7b:e1:31:b1:ce:d6: 5d:8d:1d:10:a1:b3:df:28:f8:dd:7a:02:32:c3:1c:cc:66:6e: e6:15:42:94:78:ff:17:db:a1:7c:79:3c:e9:fa:50:af:28:b5: a9:94:63:34:72:46:2e:8d:1f:a7:fa:d3:90:b2:37:bd:09:5e: 8d:a1:52:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgVBiKgzMQe5aLLmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE4OTk2MzItYWVmNi00YTNiLWI4MDctZWRjMWNhNDMw M2I2MB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk ZmRkZmMyNDgtNzJhMC00MGU2LTg2NTMtNGNmNzJjYzVmNGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGKePMTTD3gM0o30Km29wc/Zhb7ipBAAVOfP 2QlZG/X4CHGKj+DekI9wq7eCLMKrTolpgJUTYVgX5uEJ3H1CKgkIcuSux2/H8ncr y7GYiPY46oOY7c0L9gtWnE0M4p7xbADgA7EmNgs6Ol0JYY7AKzNvufKUxB+kxBsP uzTyxr1JHTCxHrQPIWnWbBbBSNptBACTAa16krWSut0mM7VgwrG6pLL0C90vbca9 Kp8Z61J2xEbRTv1mNhDsMVAyyz+x3qyZZmVUBNQvyZoxWSiwP0EETEIuJI8FZ81G hWEExyw7MT1IP32M8o9AG38wR7tBFY7RijYzYPeGFLTcVSDxHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDZNOmRslpcoP1TeWuzfBIW3VizMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5 OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMxY2E0MzAzYjYvNWIwNDczNjktMTg1My0z YzBiLTgzMGMtZDY3MTM3YzljMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWE4OTk2MzItYWVmNi00YTNiLWI4 MDctZWRjMWNhNDMwM2I2L2FhODk5NjMyLWFlZjYtNGEzYi1iODA3LWVkYzFjYTQz MDNiNi5jcmwwHwYDVR0jBBgwFoAUo8AqY6J4VLbQ5FBNiWjuunsNV40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMx Y2E0MzAzYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjP+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgH2MMXPJH/grxIaM255fNpHRL0hWjQbjo0/bSMlwL6znzpjVdF2JB6 jF78WtjKkSIOzgJmpAioY4o+ejc2Ug9H8chV3itfkoC5ASmPGTaIsfioS/17vWjS RKzUBNb9zYHgiv178Ivvd9zAhoJ1WyzDRdsBdCplyxSsUpNllozLFY2sFttFg6AQ uCCBCiROFmpu4WGJGjJ+HQdRflgFy4lOjuyN5cojVayldzd/ps1G8H0z2KJ7Oqqj jprQMk3nNXvhMbHO1l2NHRChs98o+N16AjLDHMxmbuYVQpR4/xfboXx5POn6UK8o tamUYzRyRi6NH6f605CyN70JXo2hUro= -----END CERTIFICATE-----Generated at Wed Apr 30 15:22:00 2025 by rpki-client